This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft File: Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft (raw, json) Hash identifier: cT+sJyP+fxvmLug09d8dqQj/8u84YIjWneaTgo38Yco= Subject key identifier: D0:35:5B:19:39:E8:AD:51:88:3A:70:EA:BF:C5:DB:08:2E:CB:82:0E Authority key identifier: 21:DF:24:5E:AD:99:80:D2:B3:95:33:78:2F:65:D7:56:6D:04:62:D1 Certificate issuer: /CN=21df245ead9980d2b39533782f65d7566d0462d1 Certificate serial: 019B53061EC35A75DE26D18EFA7F6A0D5F8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft Manifest number: 10ED Signing time: Thu 25 Dec 2025 01:01:08 +0000 Manifest this update: Thu 25 Dec 2025 01:01:08 +0000 Manifest next update: Fri 26 Dec 2025 01:01:08 +0000 Files and hashes: 1: Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl (hash: PwZpmO90JJha2nOWT8PaRNqmA23mE6mNMtautlcHsAc=) 2: KFGuuWvhGKXdRFWCPjT6bIvxr90.roa (hash: 5mNeMpLOgDP2WV53iNWD9JlTcJDz19nCtSLYypdRdgA=) 3: NLn-NADuc0yAyX0f_4G1dKCqIP8.roa (hash: dkLXs7qu9ok1KeNheDJk9SO+sT7GSZT5TJ1FucBWHfg=) 4: nbL7-TNKQqJ1-yJVoHEn9a5u6DU.roa (hash: tfXwKToKmsCep/7a6KKpGiz+Hfu7rsnL13FXZOQiKEU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:06:1e:c3:5a:75:de:26:d1:8e:fa:7f:6a:0d:5f:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21df245ead9980d2b39533782f65d7566d0462d1 Validity Not Before: Dec 25 01:01:08 2025 GMT Not After : Dec 26 01:01:08 2025 GMT Subject: CN=d0355b1939e8ad51883a70eabfc5db082ecb820e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b5:67:36:cb:79:f1:f1:f0:fc:57:17:a7:b3: 00:60:25:c6:52:bd:99:08:a7:82:5a:64:39:10:83: 9f:1f:b1:26:af:2a:a3:0c:03:bd:65:c2:8d:51:4d: 75:ee:ac:83:8f:9f:9f:fa:a4:9d:bf:c3:b4:77:c4: cb:59:60:dc:ad:e8:09:83:6a:d5:5d:99:00:df:6e: 58:dd:81:0d:36:d5:c9:84:61:89:81:6b:cf:49:c5: 42:7c:80:1c:c0:ed:72:13:00:19:ad:68:ad:5c:15: a0:3d:54:f7:e4:c1:30:bc:a7:6e:cc:00:9b:59:8c: b4:bd:d9:3a:92:fc:95:aa:6b:06:9c:38:b6:27:82: 45:c0:74:ee:33:6d:e6:6a:b0:9d:31:94:95:81:1b: 2a:ff:2e:85:04:13:a8:30:08:69:d9:b5:65:c1:4b: 19:cb:f6:16:fa:c0:64:32:28:70:48:8e:5e:19:d6: 71:c3:c2:b2:2f:19:e8:c9:1a:e2:44:5e:09:82:cd: 05:76:3e:6b:00:ce:37:d5:49:31:ef:c7:a3:ec:d9: d2:35:c5:08:f9:f8:b0:8d:d8:66:7c:c4:02:29:9a: 29:8b:4b:ae:7a:54:f6:7c:66:5b:04:94:d9:2f:f7: 7b:c0:2c:a4:68:29:8f:18:dc:e7:43:55:95:2c:f5: a4:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:35:5B:19:39:E8:AD:51:88:3A:70:EA:BF:C5:DB:08:2E:CB:82:0E X509v3 Authority Key Identifier: keyid:21:DF:24:5E:AD:99:80:D2:B3:95:33:78:2F:65:D7:56:6D:04:62:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:d3:38:00:0f:ac:9e:3e:fb:c5:1c:1f:2e:7e:3a:e8:8a:bd: 1a:e3:1a:f3:34:84:f1:5f:03:0b:da:f4:83:64:d2:0a:e2:3f: 6a:4a:50:4c:86:9a:ea:e6:0f:bd:e0:1e:37:d9:15:41:3b:21: 29:5e:3b:56:46:91:97:39:4c:30:cd:76:f4:ab:86:17:f3:fa: d2:c0:7b:23:63:03:72:44:57:63:22:91:56:c1:6c:cc:6d:f4: 91:bf:fa:53:c5:85:7c:28:23:e5:b8:34:68:45:82:0d:25:f2: f7:01:31:f6:16:a6:d1:16:02:93:ff:d3:de:e3:41:9c:58:0b: dc:68:97:57:f7:69:44:d5:6a:3e:53:6f:61:a9:85:43:cb:1e: be:b5:4a:89:23:f7:7f:98:e4:fd:bb:d4:55:1d:ea:e0:88:6a: 9e:ac:f5:cf:df:36:71:bf:31:1e:3d:0c:78:69:ac:86:fb:3a: f8:33:03:03:62:c1:96:21:85:5b:44:5a:b8:ad:82:a4:e4:72: 92:4a:1e:dd:7a:73:c8:c2:60:0b:b3:39:a8:f6:60:28:27:7d: 3e:8c:cc:de:6a:3a:16:ca:1c:97:5b:1c:3e:3d:33:d6:35:45: 35:19:f2:57:b2:61:8f:fe:db:fe:8f:0e:19:8c:bf:bf:34:c0: 2e:ee:7c:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTBh7DWnXeJtGO+n9qDV+PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxZGYyNDVlYWQ5OTgwZDJiMzk1MzM3ODJmNjVkNzU2NmQw NDYyZDEwHhcNMjUxMjI1MDEwMTA4WhcNMjUxMjI2MDEwMTA4WjAzMTEwLwYDVQQD EyhkMDM1NWIxOTM5ZThhZDUxODgzYTcwZWFiZmM1ZGIwODJlY2I4MjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37VnNst58fHw/FcXp7MAYCXGUr2Z CKeCWmQ5EIOfH7EmryqjDAO9ZcKNUU117qyDj5+f+qSdv8O0d8TLWWDcregJg2rV XZkA325Y3YENNtXJhGGJgWvPScVCfIAcwO1yEwAZrWitXBWgPVT35MEwvKduzACb WYy0vdk6kvyVqmsGnDi2J4JFwHTuM23marCdMZSVgRsq/y6FBBOoMAhp2bVlwUsZ y/YW+sBkMihwSI5eGdZxw8KyLxnoyRriRF4Jgs0Fdj5rAM431Ukx78ej7NnSNcUI +fiwjdhmfMQCKZopi0uuelT2fGZbBJTZL/d7wCykaCmPGNznQ1WVLPWk+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNA1Wxk56K1RiDpw6r/F2wguy4IOMB8GA1UdIwQY MBaAFCHfJF6tmYDSs5UzeC9l11ZtBGLRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWQ4a1hxMlpnTkt6bFRONEwyWFhWbTBFWXRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9kZjdkNmEtNDU5Mi00MDBiLWFkZTQt MGVjNTIzNWQ0ZTlmLzEvSWQ4a1hxMlpnTkt6bFRONEwyWFhWbTBFWXRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9kZjdkNmEtNDU5Mi00MDBiLWFkZTQtMGVjNTIzNWQ0ZTlm LzEvSWQ4a1hxMlpnTkt6bFRONEwyWFhWbTBFWXRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS9M4AA+s nj77xRwfLn466Iq9GuMa8zSE8V8DC9r0g2TSCuI/akpQTIaa6uYPveAeN9kVQTsh KV47VkaRlzlMMM129KuGF/P60sB7I2MDckRXYyKRVsFszG30kb/6U8WFfCgj5bg0 aEWCDSXy9wEx9ham0RYCk//T3uNBnFgL3GiXV/dpRNVqPlNvYamFQ8sevrVKiSP3 f5jk/bvUVR3q4Ihqnqz1z982cb8xHj0MeGmshvs6+DMDA2LBliGFW0RauK2CpORy kkoe3XpzyMJgC7M5qPZgKCd9PozM3mo6Fsocl1scPj0z1jVFNRnyV7Jhj/7b/o8O GYy/vzTALu58wA== -----END CERTIFICATE-----Generated at Thu Dec 25 06:24:51 2025 by rpki-client